Tls Session Management Method In Supl-Based Positioning System

• US 20080109650A1
• Filed: 01/09/2006
• Published: 05/08/2008
• Est. Priority Date: 01/17/2005
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Shim, Dong-Hee, Chu, Youn-Sung
• Granted Patent: US 7,900,039 B2
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/12 between location registers or mobility servers

Abstract

When a SET receives a positioning service from a V-SLP by performing a roaming from a H-SLP to the V-SLP in a SUPL-based positioning system, only a new TLS connection is generated using an abbreviated handshake protocol without generating anew TLS session after the roaming. That is, when opening a TLS session for ensuring security in a SUPL-based positioning method, in particular, when opening a new TLS session between the V-SLP (V-SPC) and the SET after opening the TLS session between the H-SLP and the SET, the key information having used in the previous TLS session is provided to the V-SLP to set a new TLS connection, thereby reducing a load of an entire system.

Claims

1. A transport layer security (TLS) session management method in a system in which a terminal having a TLS session with a Home-SUPL Location Platform (H-SLP) receives a positioning service by roaming to a Visited-SLP (V-SLP), comprising:

transmitting TLS session information, which has been used when the H-SLP sets a TLS session with the terminal, from the H-SLP to the V-SLP; and

using the TLS session information to set a new TLS connection for a location calculation between the terminal and the V-SLP.

2. The method of claim 1, wherein the TLS session information includes a TLS session ID and new key information.

3. The method of claim 2, wherein the key information is a master secret or a roaming-master secret.

4. The method of claim 2, wherein the TLS session information further includes parameters indicating an encryption method and a compression method which have been used upon connecting the TLS session between the H-SLP and the terminal.

5. The method of claim 1, wherein the TLS session information is transmitted through a SUPL START message, which is an RLP Standard SUPL Roaming Location Immediate Request (SSRLIR) which the H-SLP transfers to the V-SLP.

6. The method of claim 3, wherein the master secret is generated by applying a value obtained by concatenating a pre-master secret with an arbitrary value which has been known between the terminal and the H-SLP to a pseudo random function.

7. The method of claim 3, wherein the roaming-master secret is generated by hashing a value obtained by concatenating the master secret with a roaming count.

8. The method of claim 1, wherein setting of the new TLS connection is performed by an abbreviated handshake protocol.

9. The method of claim 1, wherein the setting of the new TLS connection includes:

transmitting a Client Hello message including Version, SET-Random, and sessionID from the terminal to the V-SPC;

sequentially transmitting a Server Hello message including Version, V-SLP-Random and sessionID, a ChangeCipherSpec message and a Finished message from the V-SPC to the terminal; and

when the finished message is inputted from the V-SPC, sequentially transmitting the ChangeCipherSpec message and the Finished message by the terminal, to thus terminate an abbreviated handshake process.

10. A TLS session management method in a roaming of a SUPL-based positioning system using a TLS comprising:

setting a TLS session between a terminal and a H-SLP, and transmitting a SUPL START message from the terminal and the H-SLP;

transferring information related to the set TLS session from the H-SLP to a V-SLP to which the terminal roams;

transferring information related to the V-SLP from the H-SLP to the terminal; and

using the TLS session information to set a new TLS session between the terminal and the V-SLP in the TLS session.

11. The method of claim 10, the TLS session information includes:

a TLS session ID having used upon connecting the TLS session between the H-SLP and the terminal; and

a master secret or roaming-master secret which are key information of the TLS session.

12. The method of claim 11, wherein the TLS session information further includes parameters indicating an encryption method and a compression method which have been used upon connecting the TLS session between the H-SLP and the terminal.

13. The method of claim 10, wherein the master secret is generated by applying a value obtained by concatenating a pre-master secret with an arbitrary value which has been known between the terminal and the H-SLP to a pseudo random function.

14. The method of claim 10, wherein the roaming-master secret is generated by hashing a value obtained by concatenating the master secret with a roaming count.

15. The method of claim 10, wherein the TLS session is performed by a full handshake protocol.

16. The method of claim 10, wherein the new TLS connection is performed by an abbreviated handshake protocol.

17. The method of claim 10, further comprising:

when the new connection is set, performing a SUPL positioning procedure between the V-SLP and the SET to calculate a location of the SET.

18. The method of claim 10, wherein the setting of the new TLS connection includes:

transmitting a Client Hello message including Version, SET-Random, and sessionID from the terminal to the V-SPC;

sequentially transmitting a Server Hello message including Version, V-SLP-Random and sessionID, a ChangeCipherSpec message and a Finished message from the V-SPC to the terminal; and

when the finished message is inputted from the V-SPC, sequentially transmitting the ChangeCipherSpec message and the Finished message by the terminal, to thus terminate an abbreviated handshake process.

19. A TLS session management method in a roaming of a SUPL-based positioning system using a TLS comprising:

setting a TLS session between a SUPL Enabled Terminal (SET) and a H-SLP;

transmitting a SUPL START message from the SET to the H-SLP;

when the H-SLP receives the SUPL START message, transmitting TLS session information to a V-SUPL Location Center (SLC) of a V-SLP through an RLP SSRLIR message;

transferring the received TLS session information from the V-SLC to the V-SUPL Positioning Center (SPC) through an internal initialization;

transmitting a session ID and a V-SPC address to perform the position calculation from the V-SLC to the H-SLP through an RLP SSRLIA message;

transmitting the session ID and the V-SPC address through a message in response to the SUPL START message from the H-SLP to the SET;

setting a new TLS connection using the TLS session information between the SET and the V-SPC;

calculating the SET location by performing the SUPL positioning procedure between the V-SPC and the SET; and

when the location of the SET is completely calculated, transmitting a SUPL END message from the V-SPC to the SET.

20. The method of claim 19, wherein the TLS session information includes:

a TLS session ID having used upon connecting the TLS session between the H-SLP and the SET; and

a master secret or roaming-master secret which are key information of the TLS session.

21. The method of claim 20, wherein the TLS session information further includes parameters indicating an encryption method and a compression method which have been used upon connecting the TLS session between the H-SLP and the SET.

22. The method of claim 20, wherein the master secret is generated by applying a value obtained by concatenating a pre-master secret with an arbitrary value which has been known between the SET and the H-SLP to a pseudo random function.

23. The method of claim 20, wherein the roaming-master secret is generated by hashing a value obtained by concatenating the master secret with a roaming count.

24. The method of claim 19, wherein the TLS session is performed by a full handshake protocol.

25. The method of claim 19, wherein the new TLS connection is performed by an abbreviated handshake protocol.

26. The method of claim 19, wherein the setting of the new TLS connection includes:

transmitting a Client Hello message including Version, SET-Random, and sessionID from the SET to the V-SPC;

sequentially transmitting a Server Hello message including Version, V-SLP-Random and sessionID, a ChangeCipherSpec message and a Finished message from the V-SPC to the SET;

when the finished message is inputted from the V-SPC, sequentially transmitting the ChangeCipherSpec message and the Finished message by the SET, to thus terminate an abbreviated handshake process.